Privacy Policy

Last updated: March 5, 2026

1. Introduction

Golem Works ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our AI-powered storytelling platform ("the Service").

2. Information We Collect

Account Information

When you sign in with Google OAuth, we receive and store:

  • Your name
  • Your email address
  • Your profile picture URL
  • Your Google account identifier

User Content

We store content you create through the Service, including:

  • Stories, characters, locations, items, and other world-building entities
  • Voice design descriptions and audio narration settings
  • Campaign configurations and entity relationships

Usage Data

We collect information about how you interact with the Service, including:

  • Generation requests and credit usage
  • Feature usage patterns
  • Error logs and performance data

Payment Information

Payments are processed by Paddle.com (our Merchant of Record). We do not directly collect or store your payment card details. Paddle handles all payment processing, invoicing, and tax collection. Please review Paddle's Privacy Policy for details on how they process payment information.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process your transactions and manage your account
  • Send you service-related communications (e.g., account approval, subscription updates)
  • Monitor and prevent abuse of the Service
  • Comply with legal obligations

We do not sell your personal information. We do not use your User Content to train our own AI models. However, content sent to third-party AI providers (see Section 4) may be subject to their respective data policies, which may include using inputs to improve their models. We recommend reviewing the data policies of our AI providers if this is a concern.

4. Third-Party Services

We use the following third-party services to operate the platform:

  • Google OAuth — for authentication
  • Paddle.com — for payment processing (Merchant of Record)
  • AI model providers (via OpenRouter and direct APIs) — for story generation. Prompts and User Content are sent to these providers to generate responses. We do not share your account information with these providers. These providers may have their own data retention and training policies; please review OpenRouter's Privacy Policy for details.
  • ElevenLabs (via fal.ai) — for text-to-speech audio generation
  • Logfire — for application monitoring (optional; only active when configured)

5. Data Storage and Security

Your data is stored in our databases hosted on secure cloud infrastructure. We implement reasonable technical and organizational measures to protect your data, including:

  • Encrypted connections (HTTPS/TLS)
  • CSRF protection and security headers
  • Rate limiting on sensitive endpoints
  • Audit logging for security events
  • Session management with secure cookies

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account information and User Content for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law.

Generated audio files are cached for at least 30 days for performance purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal data
  • Export your User Content
  • Object to certain processing of your data

To exercise these rights, contact us at support@golem.works.

8. Cookies

We use essential cookies for:

  • Authentication session management
  • CSRF protection

We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. The "Last updated" date at the top indicates the most recent revision.

12. Contact

For privacy-related questions or requests, contact us at support@golem.works.